General

  • Target

    ab3b97a8cc506737750b570c5d4bb1543153136f67781bfa908dc025fd1c72dfN

  • Size

    43KB

  • Sample

    241023-ps6hrszfrb

  • MD5

    6cfc0db08cfdb9d82e675115da38f660

  • SHA1

    b5731b939b4561c8291a92fc0c178d2b35da6286

  • SHA256

    ab3b97a8cc506737750b570c5d4bb1543153136f67781bfa908dc025fd1c72df

  • SHA512

    71285c50be8a8ab4452e477c9598e89a3168c5d991f6ac46bab3e8c8b036a03ffadad830bc8addfbfc42c4e983fc96d5d4b4dab8b7635cb56cd07bf69ba84732

  • SSDEEP

    384:UZyaJNxdW/IUyNZs/5OFile+eEzll56ljzYIij+ZsNO3PlpJKkkjh/TzF7pWnpml:invxIghNZ85OFillhlyDuXQ/o0C+L

Malware Config

Extracted

Family

njrat

Version

Njrat 0.7 Golden By Hassan Amiri

Botnet

HacKed

C2

148.251.75.168:2709

Mutex

Windows Update

Attributes
  • reg_key

    Windows Update

  • splitter

    |Hassan|

Targets

    • Target

      ab3b97a8cc506737750b570c5d4bb1543153136f67781bfa908dc025fd1c72dfN

    • Size

      43KB

    • MD5

      6cfc0db08cfdb9d82e675115da38f660

    • SHA1

      b5731b939b4561c8291a92fc0c178d2b35da6286

    • SHA256

      ab3b97a8cc506737750b570c5d4bb1543153136f67781bfa908dc025fd1c72df

    • SHA512

      71285c50be8a8ab4452e477c9598e89a3168c5d991f6ac46bab3e8c8b036a03ffadad830bc8addfbfc42c4e983fc96d5d4b4dab8b7635cb56cd07bf69ba84732

    • SSDEEP

      384:UZyaJNxdW/IUyNZs/5OFile+eEzll56ljzYIij+ZsNO3PlpJKkkjh/TzF7pWnpml:invxIghNZ85OFillhlyDuXQ/o0C+L

    • njRAT/Bladabindi

      Widely used RAT written in .NET.

MITRE ATT&CK Enterprise v15

Tasks